
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa
File: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: 7H1B1QNYupN1EPyviDEhtIBX9AU52B9C8kCqqxvSyn4=
Subject key identifier: E4:64:B8:F9:8E:E2:68:7A:FB:D7:BB:45:9F:90:D9:7F:C6:6A:75:BE
Certificate issuer: /CN=57789CB78D85714C21EE6022D183A8D40AFE4063
Certificate serial: 52C5E3DCFC4CBC9E34F65C491D6E9342D27979F3
Authority key identifier: 57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa
Signing time: Sun 03 May 2026 02:43:54 +0000
ROA not before: Sun 03 May 2026 02:38:54 +0000
ROA not after: Sun 02 May 2027 02:43:54 +0000
asID: 17995
IP address blocks: 103.168.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.crl
rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 17:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c5:e3:dc:fc:4c:bc:9e:34:f6:5c:49:1d:6e:93:42:d2:79:79:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57789CB78D85714C21EE6022D183A8D40AFE4063
Validity
Not Before: May 3 02:38:54 2026 GMT
Not After : May 2 02:43:54 2027 GMT
Subject: CN=E464B8F98EE2687AFBD7BB459F90D97FC66A75BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:6a:57:fc:20:8e:03:7f:45:d3:17:17:cb:
c0:e0:32:68:95:41:67:cf:ce:aa:1d:42:75:a6:08:
cd:15:a3:a1:ba:ca:ac:7a:6a:1a:88:1e:b0:bc:20:
e2:ba:6c:d7:80:bf:04:eb:17:f4:02:92:7c:3b:f4:
7d:17:45:4b:be:53:57:c8:71:36:82:cd:b5:25:0b:
59:e4:2c:c5:b1:9f:e2:52:b9:e4:6e:0a:2d:5f:28:
00:ae:1f:11:66:c6:b3:70:4f:97:e1:5d:da:58:f8:
18:f9:cd:e8:cf:97:e4:fd:08:6f:cd:de:55:42:53:
cd:34:07:e4:d1:b3:0d:5d:17:1c:68:4f:04:4a:26:
c5:88:57:e7:18:b8:a6:68:e6:d7:9b:fd:ed:b4:58:
a3:2f:0a:df:85:f4:40:ba:f4:12:3d:41:97:9e:9b:
7c:16:1a:1c:65:58:fa:f6:0e:f8:fa:2a:83:73:f2:
83:82:23:1c:f6:6e:ca:3e:8f:7e:a2:19:31:b9:4c:
fc:74:5b:3b:03:97:38:01:a1:f8:7f:ac:56:49:83:
96:33:f3:38:56:fb:ff:6d:a7:fa:49:91:5b:d4:0a:
22:9e:5d:a7:ba:ed:82:f6:9a:26:8b:15:6a:24:e1:
2a:8e:03:6d:f6:ed:27:94:cd:a4:72:82:8b:dd:b9:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:B8:F9:8E:E2:68:7A:FB:D7:BB:45:9F:90:D9:7F:C6:6A:75:BE
X509v3 Authority Key Identifier:
keyid:57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:8f:b9:ac:cf:0f:7a:2f:f4:84:e5:9d:56:c4:27:0c:8c:6a:
84:cc:bd:77:b3:4c:6c:2e:4d:79:0f:fe:07:55:3e:22:a8:db:
ad:0a:1f:ea:b6:1a:b4:5f:de:34:09:b2:0d:2b:4d:c5:de:bf:
a6:5a:49:f5:7e:63:3a:58:d9:72:85:ba:2e:a1:e9:63:0f:79:
0f:a3:4f:fb:df:07:e7:91:27:fe:fa:1d:fd:e6:fb:bd:47:46:
d1:b0:2f:33:bb:ca:91:73:b6:f4:d3:09:b2:e3:4c:16:64:4a:
59:fc:3d:36:d9:b4:cf:9c:4d:d8:40:ba:f0:7a:3c:21:a4:e8:
38:22:03:5b:de:53:f2:98:29:37:13:de:d5:7f:c0:bc:69:e4:
e1:bf:eb:85:8b:14:80:e1:8f:85:ec:ae:b4:99:ef:64:2f:2e:
c9:89:53:65:fd:6d:6f:df:a9:9c:d8:45:ed:c7:10:29:ab:13:
95:ca:61:6a:d5:52:f2:df:8d:37:70:c2:3a:84:84:16:32:07:
a6:34:6f:fd:7e:9a:4c:ea:44:78:47:f5:6c:24:e9:90:3b:94:
8c:c0:6f:bf:46:8e:1e:c5:2f:37:1d:59:54:07:21:cc:15:06:
d7:58:63:8b:e6:c7:3a:3e:df:3a:35:bf:12:4f:9b:1a:33:09:
2c:b8:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:36:28 2026 by rpki-client